Main Vulnerability Database SB2003061602

SB2003061602 - Improper input validation in Linux kernel

Published: June 16, 2003

Security Bulletin ID SB2003061602

Severity

Low

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Code execution

Description

This security bulletin contains information about 1 security vulnerability.

1) Improper input validation (CVE-ID: CVE-2003-0248)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The mxcsr code in Linux kernel 2.4 allows attackers to modify CPU state registers via a malformed address.

Install update from vendor's website.